CVE-2015-5143 High Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

CVE-2015-5143 - High Severity Vulnerability

Vulnerable Library - Django-1.7.1-py2.py3-none-any.whl

A high-level Python Web framework that encourages rapid development and clean, pragmatic design.

path: /example-python/requirements.txt

Library home page: https://pypi.python.org/packages/d2/29/1935a5825b8820d1e398ab83f0730d483ec731fae34745ddac8318cf6ac8/Django-1.7.1-py2.py3-none-any.whl

Dependency Hierarchy:

• ❌ Django-1.7.1-py2.py3-none-any.whl (Vulnerable Library)

Vulnerability Details

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

Publish Date: 2015-07-14

URL: CVE-2015-5143

CVSS 2 Score Details (7.8)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2015-5143

Release Date: 2015-07-14

Fix Resolution: 1.4.21,1.7.9,1.8.3

---

Step up your Open Source Security Game with WhiteSource here